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IN THE CLAIMS: 

The status and content of each claim follows. 

1-16. (canceled) 

17. (currently amended) A method for a registry of business entity definitions to 
handle user requests to access business entity definitions, the method comprising: 

receiving a request in a processor associated with said registry from a user to access a 
business entity definition comprising a plurality of information elements, each of said 
information elements having permission details associated therewith : 

obtaining the identity of the user from data associated with the request with said 
processor [[.]]: 

determining with said processon for each of said information elements, whether the user 
has permission to access that said information element based on the pennission details associated 
with that said infonnation element and said identity of the user infonnation in the business entity 
d e finition from permission details associat e d with the business e ntity d e finition and th e identity 
of th e user ; and 

with said processor, denying the user access to infonnation in the business entity 
definition if those information elements for which it is detemiined that the user does not have 
pemiissiont 

wher e in the information in the business entity d e finition comprises a plurality of 
information elements each having p e rmis s ion detail s associated therewith; 
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wh e r e in detemiining whether the user has permission to access information in the 
busin e ss entity definition from pomiission details a s sociated with the busin e ss entity definition 
and the identity of the user comprises determining from p e rmission details associated with each 
infomiation element whether the user has permission to access that information element; and 

wherein denying the us e r access to information in the busin e ss entity definition if it is 
d e t e rmined that the user does not hav e permission comprises denying the u s er acce s s to thos e 
information olomonts for which it is determined that the us e r do e s not have permission . 

• 1 8. (currently amended) The method of claim [[16]] i? wherein the request 
specifies a search criteria, and wherein the method further comprises: 

determining with said processor what information in the business entity definition the 
user wishes to access using the search criteria to locate the business entity definition; and 

determining with said processor whether the user has peirnission to access the 
information that the user wishes to access. 

19. (currently amended) The method of claim [[16]] J7, wherein determining with 
said processor whether the user has permission to access inforaiation in the business entity 
definition from permission details associated with the business entity definition and the identity 
of the user comprises determining with said processor whether a user has permission to access an 
information element from an access policy and permission details associated with a different 
information element. 
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20. (currently amended) The method of claim [[ 1 8]] 19 wherein the information 
elements are in a hierarchy and wherein determining with said processor whether the user has 
peniiission to access information in the business entity definition from permission details 
associated with the business entity definition and the identity of the user comprises determining 
with said processor that a user does not have permission to access a first information element if 
permission details associated with one or more second information elements directly beneath the 
first information element in the hierarchy indicate that user does not have access to one or more 
of the second information elements. 

2 1 . (currently amended) A registry of business entity definitions for handling 

rcquoGts to acc e ss business entity definitions , the registry comprising: 
at least one processor: and 

a computer readable memorv communicativelv coupled to said processor having said 
business entity definitions stored thereon: 

wherein said processor is configured to: 

means for recoiviJig receive a request from a user to access a business entity 
definition comprising a plurality of infomiation elements, each of said information elements 
having permission details associated therewith : 

m e ans for obtaining obtain the identity of the user from data associated with the 

request; 

m e ans for det e rmini ftg determine, for each of said infomiation elements, whether 
the user has pemiission to access that said information element based on the pennission details 
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associated with that said infomiation element and said identity of the user information in the 
business entity definition from p e rmission d e tails associat e d with th e busin e ss e ntity definition 
and the identity of the user ; and 

moans for denying deny the user access to information in th e business entity 
definition if those information elements for which it is determined that the user does not have 
permissiont 

whoroin the information in the business entity d e finition comprises a plurality of 
information elements e ach having permission details associat e d therewith; 

wh e r e in the means for det e nnining comprises moans for d e termining from permission 
details associated with e ach information e lement whether the user has permission to access that 
information element; and 

wh e rein the m e ans for denying compris e s moans for denying the user access to those 
infonnation elements for which it is determined that the user docs not have permission . 

22. (currently amended) The registry of claim [[20]] 2i wherein the request 
specifies a search criteria, and wherein the registry furth e r comprises data processing host device 
is further configured to : 

means for det e rmining determine what information in the business entity definition the 
user wishes to access using the search criteria to locate the business entity definition. 

23. (currently amended) The registry of claim [[20]] 21, wherein the m e ans for 
determining whether the user has permission to acc e ss information in the business entity 
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definition from pormission details associat e d with the busin e ss entity definition and the identity 
of th e user fiirthor compris e s m e ans for d e t e rmining the data processing host device is further 
configured to determine whether a user has permission to access an infonxiation element from an 
access policy and permission details associated with a different information element. 

24. (currently amended) The registry of claim [[22]] 23 wherein the information 
elements are in a hierarchy and the access poUcy specifies that a user does not have permission to 
access a first information element if permission details associated with one or more second 
information elements directly beneath the first information element in the hierarchy indicate that 
user does not have access to one or more of the second information elements. 

25. (currently amended) The registry of claim [[20]] 2i, further comprising wherein 
the data processing host device is further configured to : 

means for locating locate the permission details in a file system in which the pennission 
details are in a location in the file system which is defined according to the information element 
with which they are associated. 

26. (currently amended) The registry of claim [[20]] 21, wherein the registry is a 
UDDI registry and the information in the business entity definition is a business entity 
information element, the business entity information element containing one or more business 
service entity information elements, each business service entity containing one or more binding 
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template information elements and each binding template containing one or more references each 
referring to a technical model infomiation element. 

27. (currently amended) A computer program product for a registry of business 
entity definitions to handle user requests to access business entity definitions, the computer 
program product comprising: 

a computer usable readable storage medium having computer usable program code 
embodied therewith thereon , the computer usable program code comprising: 

computer usable program code configured to receive a request from a user to 
access a business entity definifion comprising a plurality of information elements, each of said 
information elements having peimission details associated therewith : 

computer usable program code configured to obtain the identity of the user firom 
data associated with the request; 

computer usable program code configured to determine , for each of said 
infonnation elements, whether the user has permission to access that said information element 
based on the permission details associated with that said information element and said identity of 
the user information in th e business entity d e finition from pormir . sion d e tails Qfifiociat e d with the 
busin es s entity definition and the identity of the user ; and 

computer usable program code configured to deny the user access to information 
in the busin e ss e ntity definition if those infomiation elements for which it is determined that the 
user does not have permissiont 
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wh e rein the information in the businoGs ontit>^ definition comprises q plurality of 
information el e m e nts e ach having p e rmission details associat e d ther e with; 

wh e rein the computer usable program code configured to determin e whether the user has 
p e rmission to access information in the business entity definition from penTiission details 
associated with the busin e ss entit>^ definition and the idontit>^ of the user comprises computer 
usable program code configured to dotennino from p e rmission details associated with each 
infontiation el e ment wheth e r th e user has permission to access that infonrtation element; and 

wherein the computer usable program code configured to deny the user access to 
information in the business ontit>^ doFinition if it is d e termined that the us e r does not have 
permission comprises computer usable program code configured to deny the user access to those 
infonnation elements for which it is determined that the user does not hav e permission . 

28. (currently amended) The computer program product of claim [[26]] 27 wherein 
the request specifies a search criteria, and further comprising: 

computer usable program code configured to determine what information in the business 
entity definition the user wishes to access using the search criteria to locate the business entity 
definition; and 

computer usable program code configured to determine whether the user has pennission 
to access the information that the user wishes to access, 

29. (currently amended) The computer program product of claim [[26]] 27, wherein 
the computer usable program code configured to determine whether the user has pennission to 
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access infomiation in the business entity definition from pennission details associated with the 
business entity definition and the identity of the user comprises computer usable program code 
configured to deteraiine whether a user has permission to access an information element from an 
access policy and permission details associated with a different information element. 

30. (currently amended) The computer program product of claim [[28]] 29 wherein 
the information elements are in a hierarchy and wherein determining whether the user has 
permission to access information in the business entity definition from permission details 
associated with the business entity definition and the identity of the user comprises determining 
that a user does not have permission to access a first information element if permission details 
associated with one or more second information elements directly beneath the first infomiation 
element in the hierarchy indicate that user does not have access to one or more of the second 
information elements. 



